windows-itpro-docs/windows/security/threat-protection/windows-defender-security-center/wdsc-hide-notifications.md

title, description, keywords, search.product, ms.pagetype, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, ms.localizationpriority, author, ms.author, ms.date, ms.reviewer, manager

title	description	keywords	search.product	ms.pagetype	ms.prod	ms.mktglfcycl	ms.sitesec	ms.pagetype	ms.localizationpriority	author	ms.author	ms.date	ms.reviewer	manager
Hide notifications from the Windows Security app	Prevent Windows Security app notifications from appearing on user endpoints	defender, security center, app, notifications, av, alerts	eADQiWindows 10XVcnh	security	w10	manage	library	security	medium	dansimp	dansimp	04/30/2018		dansimp

Hide Windows Security app notifications

Applies to

• Windows 10, version 1809 and above

Audience

• Enterprise security administrators

Manageability available with

• Group Policy

The Windows Security app is used by a number of Windows security features to provide notifications about the health and security of the machine. These include notifications about firewalls, antivirus products, Windows Defender SmartScreen, and others.

In some cases, it may not be appropriate to show these notifications, for example, if you want to hide regular status updates, or if you want to hide all notifications to the employees in your organization.

There are two levels to hiding notifications:

1. Hide non-critical notifications, such as regular updates about the number of scans Windows Defender Antivirus ran in the past week
2. Hide all notifications

If you set Hide all notifications to Enabled, changing the Hide non-critical notifications setting will have no effect.

You can only use Group Policy to change these settings.

Use Group Policy to hide non-critical notifications

You can hide notifications that describe regular events related to the health and security of the machine. These are notifications that do not require an action from the machine's user. It can be useful to hide these notifications if you find they are too numerours or you have other status reporting on a larger scale (such as Update Compliance or System Center Configuration Manager reporting).

This can only be done in Group Policy.

Important

Requirements

You must have Windows 10, version 1903. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings.

1. Download the latest Administrative Templates (.admx) for Windows 10, v1809.

2. On your Group Policy management machine, open the Group Policy Management Console, right-click the Group Policy Object you want to configure and click Edit.

3. In the Group Policy Management Editor go to Computer configuration and click Administrative templates.

4. Expand the tree to Windows components > Windows Security > Notifications. For Windows 10 version 1803 and below the path would be Windows components > Windows Defender Security Center > Notifications

5. Open the Hide non-critical notifications setting and set it to Enabled. Click OK.

6. Deploy the updated GPO as you normally do.

Use Group Policy to hide all notifications

You can hide all notifications that are sourced from the Windows Security app. This may be useful if you don't want users of the machines from inadvertently modifying settings, running antivirus scans, or otherwise performing security-related actions without your input.

This can only be done in Group Policy.

Important

Requirements

You must have Windows 10, version 1903. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings.

1. On your Group Policy management machine, open the Group Policy Management Console, right-click the Group Policy Object you want to configure and click Edit.

2. In the Group Policy Management Editor go to Computer configuration and click Administrative templates.

3. Expand the tree to Windows components > Windows Security > Notifications. For Windows 10 version 1803 and below the path would be Windows components > Windows Defender Security Center > Notifications

4. Open the Hide all notifications setting and set it to Enabled. Click OK.

5. Use the following registry key and DWORD value to Hide all notifications.

   [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications] "DisableNotifications"=dword:00000001

6. Use the following registry key and DWORD value to Hide not-critical notifications

   [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications] "DisableEnhancedNotifications"=dword:00000001

7. Deploy the updated GPO as you normally do.

Notifications

Purpose	Notification text	Toast Identifier	Critical?
Network isolation	Your IT administrator has caused Windows Defender to disconnect your device. Contact IT help desk.	SENSE_ISOLATION	Yes
Network isolation customized	Company name has caused Windows Defender to disconnect your device. Contact IT help desk phone number, email address, url.	SENSE_ISOLATION_CUSTOM (body)	Yes
Restricted access	Your IT administrator has caused Windows Defender to limit actions on this device. Some apps may not function as expected. Contact IT help desk.	SENSE_PROCESS_RESTRICTION	Yes
Restricted access customized	Company has caused Windows Defender to limit actions on this device. Some apps may not function as expected. Contact IT help desk.	SENSE_PROCESS_RESTRICTION_CUSTOM (body)	Yes
HVCI, driver compat check fails (upon trying to enable)	There may be an incompatibility on your device.	HVCI_ENABLE_FAILURE	Yes
HVCI, reboot needed to enable	The recent change to your protection settings requires a restart of your device.	HVCI_ENABLE_SUCCESS	Yes
Item skipped in scan, due to exclusion setting, or network scanning disabled by admin	The Windows Defender Antivirus scan skipped an item due to exclusion or network scanning settings.	ITEM_SKIPPED	Yes
Remediation failure	Windows Defender Antivirus couldn’t completely resolve potential threats.	CLEAN_FAILED	Yes
Follow-up action (restart & scan)	Windows Defender Antivirus found threat in file name. Please restart and scan your device. Restart and scan	MANUALSTEPS_REQUIRED	Yes
Follow-up action (restart)	Windows Defender Antivirus found threat in file. Please restart your device.	WDAV_REBOOT	Yes
Follow-up action (Full scan)	Windows Defender Antivirus found threat in file. Please run a full scan of your device.	FULLSCAN_REQUIRED	Yes
Sample submission prompt	Review files that Windows Defender will send to Microsoft. Sending this information can improve how Windows Defender Antivirus helps protect your device.	SAMPLE_SUBMISSION_REQUIRED	Yes
OS support ending warning	Support for your version of Windows is ending. When this support ends, Windows Defender Antivirus won’t be supported, and your device might be at risk.	SUPPORT_ENDING	Yes
OS support ended, device at risk	Support for your version of Windows has ended. Windows Defender Antivirus is no longer supported, and your device might be at risk.	SUPPORT_ENDED and SUPPORT_ENDED_NO_DEFENDER	Yes
Summary notification, items found	Windows Defender Antivirus successfully took action on n threats since your last summary. Your device was scanned n times.	RECAP_FOUND_THREATS_SCANNED	No
Summary notification, items found, no scan count	Windows Defender Antivirus successfully took action on n threats since your last summary.	RECAP_FOUND_THREATS	No
Summary notification, no items found, scans performed	Windows Defender Antivirus did not find any threats since your last summary. Your device was scanned n times.	RECAP_NO THREATS_SCANNED	No
Summary notification, no items found, no scans	Windows Defender Antivirus did not find any threats since your last summary.	RECAP_NO_THREATS	No
Scan finished, manual, threats found	Windows Defender Antivirus scanned your device at timestamp on date, and took action against threats.	RECENT_SCAN_FOUND_THREATS	No
Scan finished, manual, no threats found	Windows Defender Antivirus scanned your device at timestamp on date. No threats were found.	RECENT_SCAN_NO_THREATS	No
Threat found	Windows Defender Antivirus found threats. Get details.	CRITICAL	No
LPS on notification	Windows Defender Antivirus is periodically scanning your device. You’re also using another antivirus program for active protection.	PERIODIC_SCANNING_ON	No
Long running BaFS	Your IT administrator requires a security scan of this item. The scan could take up to n seconds.	BAFS	No
Long running BaFS customized	Company requires a security scan of this item. The scan could take up to n seconds.	BAFS_DETECTED_CUSTOM (body)	No
Sense detection	This application was removed because it was blocked by your IT security settings	WDAV_SENSE_DETECTED	No
Sense detection customized	This application was removed because it was blocked by your IT security settings	WDAV_SENSE_DETECTED_CUSTOM (body)	No
Ransomware specific detection	Windows Defender Antivirus has detected threats which may include ransomware.	WDAV_RANSOMWARE_DETECTED	No
ASR (HIPS) block	Your IT administrator caused Windows Defender Security Center to block this action. Contact your IT help desk.	HIPS_ASR_BLOCKED	No
ASR (HIPS) block customized	Company caused Windows Defender Security Center to block this action. Contact your IT help desk.	HIPS_ASR_BLOCKED_CUSTOM (body)	No
CFA (FolderGuard) block	Controlled folder access blocked process from making changes to the folder path	FOLDERGUARD_BLOCKED	No
Network protect (HIPS) network block customized	Company caused Windows Defender Security Center to block this network connection. Contact your IT help desk.	HIPS_NETWORK_BLOCKED_CUSTOM (body)	No
Network protection (HIPS) network block	Your IT administrator caused Windows Defender Security Center to block this network connection. Contact your IT help desk.	HIPS_NETWORK_BLOCKED	No
PUA detection, not blocked	Your settings cause the detection of any app that might perform unwanted actions on your computer.	PUA_DETECTED	No
PUA notification	Your IT settings caused Windows Defender Antivirus to block an app that may potentially perform unwanted actions on your device.	PUA_BLOCKED	No
PUA notification, customized	Company caused Windows Defender Antivirus to block an app that may potentially perform unwanted actions on your device.	PUA_BLOCKED_CUSTOM (body)	No
Network isolation ended			No
Network isolation ended, customized			No
Restricted access ended			No
Restricted access ended, customized			No
Dynamic lock on, but bluetooth off			No
Dynamic lock on, bluetooth on, but device unpaired			No
Dynamic lock on, bluetooth on, but unable to detect device			No
NoPa or federated no hello			No
NoPa or federated hello broken			No